...
Code Block | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
################################################ # Copyright (c) 2015 zibernetics inc. # # This file is part of zig # # zig is free software: you can redistribute it and/or modify # it under the terms of the Apache License as published by # the Apache Software Foundation, either version 2 of the License, or # (at your option) any later version. # # zig is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # Apache License for more details. # # You should have received a copy of the Apache License # along with zig. If not, see <http://www.apache.org/licenses/LICENSE-2.0>. # # You must ensure that the SSHLDAP properties file is sourced and contains the following: # SSHLDAP_SVCS_OPS_DN # SSHLDAP_GROUPS_OPS_DN # SSHLDAP_SVCS_OPS_DN # SSHLDAP_BASE_OPS_DN # # In addition, you must ensure that 'localSvcSLPasswd' is defined # ################################################ dn: uid=service_sshldap,"${SSHLDAP_SVCS_OPS_DN}" objectClass: top objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person cn: service_sshldap sn: service_sshldap uid: service_sshldap userPassword: "${localSvcSLPasswd}" dn: cn=sshldap_admins,"${SSHLDAP_GROUPS_OPS_DN}" objectClass: top objectClass: groupOfUniqueNames objectClass: posixGroup cn: sshldap_admins uniqueMember: uid=service_sshldap,"${SSHLDAP_SVCS_OPS_DN}" gidNumber: $((SSHLDAP_POSIX_GUID_UPPER-1)) dn: "${SSHLDAP_HOSTS_OPS_DN}" objectClass: top objectClass: organizationalUnit ou: Hosts dn: "${SSHLDAP_LAYERS_OPS_DN}" objectClass: top objectClass: organizationalUnit ou: Layers dn: "${SSHLDAP_SUDO_OPS_DN}" objectClass: top objectClass: organizationalUnit ou: Sudoers dn: "${SSHLDAP_VARS_OPS_DN}" objectClass: top objectClass: organizationalUnit ou: Variables ################################################ # # Variables # ################################################ dn: cn=posixAccount_idx,"${SSHLDAP_VARS_OPS_DN}" objectClass: top objectClass: posixGroup cn: posixAccount_idx gidNumber: ${SSHLDAP_POSIX_GUID_UPPER} ou: Variable dn: cn=posixGroup_idx,"${SSHLDAP_VARS_OPS_DN}" objectClass: top objectClass: posixGroup cn: posixGroup_idx gidNumber: ${SSHLDAP_POSIX_UID_UPPER} ou: Variable |
Code Block | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
dn: cn=schema changetype: modify add: attributeTypes attributeTypes: ( 1.3.6.1.4.1.24552.500.1.1.1.13 NAME ( 'sshPublicKey' ) DESC 'MANDATORY: OpenSSH Public key' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 EQUALITY octetStringMatch X-ORIGIN 'zibernetics package for authentication' USAGE userApplications ) dn: cn=schema changetype: modify add: objectclasses objectclasses: ( 1.3.6.1.4.1.24552.500.1.1.2.0 NAME ( 'ldapPublicKey' ) DESC 'MANDATORY: OpenSSH LPK objectclass' SUP top AUXILIARY MAY ( sshPublicKey $ uid ) X-ORIGIN 'zibernetics package for authentication' ) |
...